Microsoft SQL Server 2022 (CU 26) vulnerabilities
53 vulnerabilities
Known vulnerabilities in Microsoft SQL Server 2022 (CU 26), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-88083microsoftmicrosoft sql server 2022 (cu 26)+5
EPSS score0.35%
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-73028microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-73029microsoftmicrosoft sql server 2019 (cu 32)+8EPSS score1.00%
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-77488microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.40%
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.CVE-2026-77480microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77487microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77483microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.78%
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-77484microsoftmicrosoft sql server 2019 (cu 32)+8EPSS score1.69%
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-77481microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-77485microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.26%
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-68785microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.12%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-68775microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-68776microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68780microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68786microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.91%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-68781microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68777microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68787microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score0.33%
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.CVE-2026-68784microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68778microsoftmicrosoft sql server 2017 (cu 31)+11EPSS score1.00%
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.